The open-source VMware alternative for service providers and regulated enterprises

Open-source Cozystack (CNCF project, created by Ænix) → Ænix Public Cloud, Private Cloud and AI Platform → Ænix builds, operates and migrates them.

Cozystack is an open-source, Kubernetes-native VMware alternative that covers the core VMware Cloud Foundation stack — vSphere/ESXi, vCenter, vSAN, NSX and vCloud Director — on your own bare metal, with backups and a documented DR runbook in place of Site Recovery Manager. It is built for service providers exiting VMware Cloud Director and regulated enterprises exiting VCF. It runs virtual machines through KubeVirt (KVM-based, with live migration and snapshots) alongside containers on one Kubernetes API, uses Cilium (eBPF) for networking, LINSTOR/DRBD for replicated block storage and SeaweedFS for object storage, and a Tenant CRD for native multi-tenancy. Licensed Apache 2.0 with no per-CPU, per-VM, or per-core metering. Ænix, the company that created Cozystack and co-maintains it, builds Ænix Public Cloud Platform and Ænix Private Cloud Platform on it and runs the VMware migration end to end.

Quick facts

  • What it is An open-source, Kubernetes-native platform that covers the core VMware Cloud Foundation stack (vSphere, vCenter, vSAN, NSX, vCloud Director) on bare metal; DR is a backup-and-runbook design, not an SRM-style orchestrator.
  • Licence Apache 2.0 (no per-CPU / per-core licensing)
  • Status Cozystack is a CNCF project (Sandbox since 2025-02-28; Incubating application in due diligence)
  • Who it is for Service providers exiting VMware Cloud Director and regulated enterprises exiting VMware Cloud Foundation.
  • Architecture KubeVirt VMs + containers on one Kubernetes API, Cilium (eBPF) networking, LINSTOR/DRBD block and SeaweedFS object storage, Tenant CRD multi-tenancy.
  • Migration Six-step path: discover, deploy in parallel, transfer VMs with Konveyor Forklift, cut over networking and storage, validate DR, decommission VMware.
  • Commercial model Cozystack is free. Ænix Private Cloud Platform for regulated enterprises is quoted per RFP; support tiers for providers and self-run Cozystack start at $1,250 per 10 nodes per month.

Replace vSphere, vCenter, vSAN, NSX, and the rest of VCF with one Kubernetes-native platform on your own bare metal — no per-CPU licensing, no Broadcom renewal cliff, no US-vendor lock-in.

Cozystack is a CNCF Sandbox project. Ænix created it, co-maintains it with maintainers from other companies, runs it in production with hosting providers, and runs the migration end to end.

Pairs with: Ænix Public Cloud Platform for anyone selling cloud — hosting providers exiting VMware Cloud Director, MSPs, telcos, national operators; Ænix Private Cloud Platform for regulated enterprises exiting VMware Cloud Foundation. Service providers exiting VMware Cloud Director: see the VCD alternative. Free VMware Migration Checklist →.

CNCF Project · Kubernetes Certified Distribution · OpenSSF Best Practices · Apache 2.0

Where Cozystack fits in the VMware-alternative market

VendorStack modelBest for
CozystackOpen-source, Kubernetes-native, multi-tenantService providers, regulated enterprises, sovereign cloud
Nutanix AHVProprietary HCI on certified nodesVM-centric enterprise estates wanting one vendor
Proxmox VEOpen-source KVM/LXCSMB and labs
Scale Computing HC3Appliance HCIROBO/edge
OpenShift VirtualizationKubeVirt + OpenShift licensingExisting Red Hat customers
OpenStackMature open-source IaaSTeams with dedicated platform engineering
Azure Local (formerly Azure Stack HCI)Microsoft-licensed Hyper-V, Arc-managedMicrosoft-aligned shops

For the wider market: Best VMware alternatives 2026 — market comparison. For a feature-by-feature view: Cozystack vs VMware — head to head.


Why teams replace VMware in 2026

1. Subscription-only economics, post-Broadcom Perpetual licences retired, mandatory VCF bundling, renewals subscription-only.

2. Stack-wide vendor lock-in vSphere, NSX, vSAN, vCD, Aria — replacing one means rebuilding the rest.

3. Sovereignty and regulator pressure DORA, NIS2, and on-prem mandates make a closed US hypervisor a documented operational risk.

4. Open-source velocity has overtaken VMware’s roadmap KubeVirt, Cilium, LINSTOR, and Flux ship faster as community projects than Broadcom can match in the open.


What Cozystack gives you instead

  • Virtual machines — KubeVirt, KVM-based, live migration, snapshots
  • Tenant Kubernetes — every tenant gets their own real K8s cluster
  • Managed databases — PostgreSQL, MariaDB, Valkey, RabbitMQ, Kafka, ClickHouse, OpenSearch, MongoDB
  • S3-compatible object storage — for backups, AI training data, applications
  • GPU as a service — NVIDIA data-centre GPUs through the NVIDIA GPU Operator: passthrough of whole GPUs or NVIDIA vGPU for VMs (requires your NVIDIA vGPU licence), MIG partitions or time-sliced sharing via HAMi for pods
  • Multi-tenant control plane — Tenant CRD, nested tenants, per-tenant quotas
  • Observability — VictoriaMetrics + VictoriaLogs + Grafana, included
  • Backup & DR — Velero to S3 outside the cluster, per-database PITR, DRBD replication; VM recovery as a documented runbook
  • Self-service portal — Cozystack Dashboard; WHMCS billing integration is a proprietary Ænix module in Ænix Public Cloud Platform

Runs on your bare metal — no public-cloud dependency.


Where VMware is still the better choice

A comparison that only lists our wins is a battle card, not an evaluation. These are the places VMware is genuinely ahead, and they are the ones your architects will raise:

  • Operational depth. DRS and Storage DRS, Fault Tolerance, Storage vMotion between arrays, vVols, EVC. KubeVirt live-migrates VMs and schedules them well; it does not match twenty years of automated placement and rebalancing behaviour.
  • A certified hardware compatibility list. VMware qualifies servers, HBAs, NICs and firmware levels, and supports you on a listed configuration. Cozystack runs on commodity hardware, which means that qualification becomes yours.
  • The backup and DR ecosystem. Veeam, Commvault, Rubrik, Zerto and Site Recovery Manager speak VADP natively. Velero plus per-database PITR covers backup and restore with different tools and no orchestrated failover, and every runbook, retention policy and piece of audit evidence built on the VMware ecosystem gets rewritten.
  • ISV certification. Some application vendors certify only against ESXi and will decline a support call about the same workload on KubeVirt, whatever the technical merits.
  • Windows guests with hard edges. VMs using Measured Boot do not convert, and Windows Server 2012 and 2012 R2 do not boot after conversion. Those are rebuilds, not migrations — see the VMware migration hub.

If your renewal is tolerable, your team is deep on vSphere, and no sovereignty or multi-tenancy requirement is pushing, staying is the right call and we will say so on the review.


VMware → Cozystack: one-to-one component mapping

VMware Cloud Foundation
vSphere / vCentervSAN / NSXPer-CPU subscription
migrate via
Six-step migration
KubeVirt CDIParallel deployCilium / LINSTOR cutover
lands on
Cozystack
KubeVirt VMs + containersCilium (eBPF)LINSTOR/DRBDTenant CRD
delivers
No per-CPU licensing
Apache 2.0Your bare metalSupport with your approval
VMware / VCFCozystack equivalent
vSphere / ESXiKubeVirt on Talos
vCenterKubernetes API + Cozystack Dashboard
vSANLINSTOR or SeaweedFS
NSXCilium (eBPF)
vCloud DirectorTenant CRD + Cozystack Dashboard
vRealize / Aria OperationsVictoriaMetrics + VictoriaLogs + Grafana
Site Recovery ManagerVelero + DRBD/stretched clusters + runbook (no automated orchestrated failover — see DR)
Tanzu Kubernetes GridTenant Kubernetes (native)
vRealize AutomationSelf-service service catalogue in the portal
VMware Cloud FoundationCozystack

Two layers need redesign rather than 1:1 mapping: networking (Cilium ≠ NSX) and multi-tenancy (Tenant CRD ≠ vCD orgs). Both are addressed in the Platform Readiness Assessment.


Ready to scope your build? Book a call →

Migration path — six steps

OpenStack, CloudStack, and Proxmox migrations follow the same playbook with different image-import and network-mapping steps.


Multi-tenancy and sovereignty

  • Tenant CRD — each tenant is a Kubernetes-native isolation boundary, with quotas, RBAC, billing scope, and observability scope
  • Nested tenants — for resellers and BU separation
  • Air-gapped install — supported, documented, no extra licensing
  • No phone-home telemetry — opt-in, disabled by default
  • Built to support DORA / NIS2 work — operational resilience, supplier-risk transparency
  • Support model — support works through your GitOps repository and, with your approval, remote access to your clusters

Cozystack vs VMware — at a glance

VMware (VCF, post-Broadcom)Cozystack + Ænix
Licence modelSubscription only (VCF bundles)Apache 2.0 + optional Ænix support subscription
Renewal risk2–5× increases seen in Ænix engagementsPredictable; OSS code remains usable regardless
ComputevSphere / ESXiKubeVirt (KVM-based)
StoragevSANLINSTOR/DRBD (block), SeaweedFS (object)
NetworkNSXCilium (eBPF, CNCF Graduated)
Multi-tenancyvCloud DirectorTenant CRD (Kubernetes-native)
Backup / DRSite Recovery ManagerVelero + DRBD/stretched clusters + runbook (no automated orchestrated failover — see DR)
ObservabilityvRealize / Aria (separate licence)VictoriaMetrics + VictoriaLogs (included)
GPU for VMsNVIDIA vGPU on vSpherePassthrough or NVIDIA vGPU on KubeVirt (your NVIDIA vGPU licence)
SovereigntyClosed source, US vendorOpen source, on-prem; EU contracts via AENIX s.r.o.
Air-gap installSupported (extra licensing)Supported (no extra cost)
Pricing transparencyQuote-driven, non-publicPublic on aenix.io/pricing; OSS is free

Companies running platforms built with Ænix

Hosting providers running Ænix Public Cloud Platform in production.

Hosting providers running Ænix Public Cloud Platform in production

Written-up deployments, including a bank and a financial group, are in the case studies.


Pricing

Cozystack is open source and free to run.

  • Regulated enterprises exiting VCF go through Ænix Private Cloud Platform, quoted per RFP after a Platform Readiness Assessment.
  • Service providers on Ænix Public Cloud Platform and teams running Cozystack themselves buy support tiers per 10 physical nodes per month: Basic $1,250, Standard $3,000, Plus $5,500, Enterprise per RFP.

Migration services are scoped separately. Full breakdown on the pricing page. No per-CPU, per-VM, or per-core meter.


More questions about Windows VMs, vCD migration, hardware reuse, GPU support, and migration timelines: see the full VMware replacement guide on our blog or talk to us.

Running infrastructure and weighing the exit? See the guide for heads of infrastructure.


Three ways to start

Architecture call (30 min) Free. Your stack against the Cozystack mapping, with the obvious workload buckets and risk flags.

Platform Readiness Assessment (fixed price) 14 days (focused) or 28 days (full): inventory, dependencies, and a migration plan with timeline, budget and success criteria.

Production pilot Run a workload cohort on Cozystack hardware we provision, parallel to your VMware estate, validated against your application owners.

Or read the full VMware replacement guide on our blog · See the VMware migration path · Best VMware alternatives 2026 — market comparison · Cozystack vs VMware — head to head.


Cozystack is a CNCF Sandbox project, a CNCF Certified Kubernetes distribution, accepted into the CNCF Kubernetes AI Conformance program (September 2026), with an OpenSSF Best Practices badge. Ænix created Cozystack and co-maintains it.

Frequently asked questions

Is Cozystack a true one-to-one replacement for VMware Cloud Foundation?

It maps the core VCF stack: KubeVirt for vSphere/ESXi, Kubernetes API plus Cozystack Dashboard for vCenter and vCloud Director, LINSTOR/DRBD for vSAN, Cilium for NSX, and Velero backups, DRBD replication or stretched clusters plus a documented runbook in place of Site Recovery Manager. There is no automated, orchestrated failover like SRM. Networking and multi-tenancy need redesign rather than literal 1:1 mapping, which the Platform Readiness Assessment covers.

How does Cozystack avoid Broadcom-style renewal increases?

Cozystack is licensed Apache 2.0 with no per-CPU, per-VM, or per-core meter, so the open-source code stays usable regardless of any support contract. Your spend is hardware plus an optional Ænix support subscription or engagement, not a subscription tied to socket counts.

What replaces ESXi in Cozystack?

KubeVirt, a KVM-based virtualization layer that runs on Talos and provides live migration and snapshots. It runs VMs and containers on the same Kubernetes API, so legacy VM workloads and cloud-native workloads share one control plane.

Can Cozystack run in an air-gapped or sovereign environment?

Yes. Air-gapped installation is supported and documented with no extra licensing, there is no phone-home telemetry (opt-in, disabled by default), and it runs on your own bare metal. Ænix engineering teams are in the EU and Central Asia, and EU contracts run through AENIX s.r.o. (Czech Republic). This supports your DORA and NIS2 operational-resilience and supplier-risk work.

What does it cost compared to VMware?

Cozystack is free and open source. Regulated enterprises exiting VCF go through Ænix Private Cloud Platform, which is quoted per RFP after a Platform Readiness Assessment. Service providers on Ænix Public Cloud Platform and teams running Cozystack themselves buy support tiers from $1,250 per 10 nodes per month (Basic), then Standard $3,000, Plus $5,500 and Enterprise custom. Migration services are quoted separately. VMware VCF pricing is quote-driven and non-public.

Does Cozystack support GPUs for AI and VDI workloads?

Yes. Whole GPUs can be passed through to VMs, NVIDIA vGPU is available for VMs (requires your NVIDIA vGPU licence), and container workloads schedule through the NVIDIA GPU Operator with HAMi to time-share a card. On MIG-capable cards the operator also exposes MIG partitions, so tenants that share a card can be separated in hardware.

Planning your migration?

Start with a fixed-price Platform Readiness Assessment — architecture review, gap analysis, and a roadmap you can take to the board.